{"ip":"216.24.210.10","total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"360 bytes sent","bytes_sent":360,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-14T01:40:30","last_seen":"2026-09-14T01:40:30","events_24h":0,"events_7d":1,"geo":{"country_code":"US","country_name":"United States","region":"California","city":"Los Angeles","lat":34.0544,"lon":-118.244,"asn":62240,"org":"Clouvider Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as62240","label":"Clouvider","category":"cdn","url":"https://www.peeringdb.com/asn/62240"},"cve_matches":[],"malware":[],"top_ports":[{"port":5061,"proto":"tcp","label":"SIPS","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i141000_cbb2034c60b8_e5728521abd4"],"tls_ja3":["2079bcc000c9a54e0784733c0142d140"],"ja4h":[]},"fingerprint_peers":{"t13i141000_cbb2034c60b8_e5728521abd4":10},"user_agents":[],"timeline":[{"date":"2026-09-14","count":1}],"recent_events":[{"timestamp":"2026-09-14T01:40:30","port":5061,"proto":"tcp","app_proto":"tls","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"REGISTER sip:<HONEYPOT>:5061 SIP/2.0\r\nVia: SIP/2.0/TLS 100.64.100.6;branch=z9hG4bK18d50c5e93006faa\r\nMax-Forwards: 70\r\nFrom: <sip:55010@100.64.100.6>;tag=93006faa\r\nTo: <sip:55010@<HONEYPOT>:5061>\r\nCall-ID: 18d50c5e93006faa@100.64.100.6\r\nCSeq: 1 REGISTER\r\nContact: <sip:55010@100.64.100.6>\r\nUser-Agent: Avaya Communicator for Windows\r\nContent-Length: 0\r\n\r\n","payload_hex":"5245474953544552207369703a<HONEYPOT>3a35303631205349502f322e300d0a5669613a205349502f322e302f544c53203130302e36342e3130302e363b6272616e63683d7a39684734624b313864353063356539333030366661610d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a3535303130403130302e36342e3130302e363e3b7461673d39333030366661610d0a546f3a203c7369703a353530313040<HONEYPOT>3a353036313e0d0a43616c6c2d49443a2031386435306335653933303036666161403130302e36342e3130302e360d0a435365713a20312052454749535445520d0a436f6e746163743a203c7369703a3535303130403130302e36342e3130302e363e0d0a557365722d4167656e743a20417661796120436f6d6d756e696361746f7220666f722057696e646f77730d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","ja3":"2079bcc000c9a54e0784733c0142d140","session":"d06d3491-5726-4ddc-9b46-a614bac3a0f8","seq":1,"duration_ms":100,"bytes_in":360,"bytes_out":13,"enriched":{"digest":"ad74fc617d821daf","label":"SIP","strings":["REGISTER sip:<HONEYPOT>:5061 SIP/2.0","Via: SIP/2.0/TLS 100.64.100.6;branch=z9hG4bK18d50c5e93006faa","Max-Forwards: 70","From: <sip:55010@100.64.100.6>;tag=93006faa","To: <sip:55010@<HONEYPOT>:5061>","Call-ID: 18d50c5e93006faa@100.64.100.6","CSeq: 1 REGISTER","Contact: <sip:55010@100.64.100.6>","User-Agent: Avaya Communicator for Windows","Content-Length: 0"],"iocs":{"ips":["100.64.100.6"],"paths":["/2.0/TLS"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-19T15:16:34.386059+00:00"}